Linux Cryptomining Campaign Weaponizes PAM to Hide XMRig Botnet Activity

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 30, 2026 A new Linux cryptomining campaign has surfaced using a rare trick to stay hidden inside compromised networks. Instead of behaving like typical malware, the operators turned a trusted Linux security feature into a tool for covering their …

GitLab Fixes 13 Security Flaws That Can Leak Data, Alter Pipelines, and Crash Servers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 30, 2026 GitLab has released critical security updates to address 13 vulnerabilities that could potentially expose sensitive data, manipulate CI/CD pipelines, and disrupt server availability across Community Edition (CE) and Enterprise Edition (EE) deployments. The latest patch versions, 19.2.1, …

A Two-Minute Microsoft Teams Call Could End With Your Network Encrypted With Ransomware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 30, 2026 A short Microsoft Teams call can now become the first step in a ransomware attack. Attackers posing as IT support staff are persuading employees to grant remote access, then using that foothold to spread through networks and …

Claude Worldwide Outage Disrupts Users With “Request Failed With 529 Overloaded” Message

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 30, 2026 Anthropic’s Claude AI platform suffered a worldwide outage on July 29, 2026, causing failed prompts, slow responses, interrupted conversations, and “Request Failed With 529 Overloaded” errors across multiple models. The outage affected both Claude’s web interface and …

Inside the Cybercrime Platform That Turns Helpdesk Calls Into Enterprise Account Takeovers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Voice phishing is no longer limited to a convincing phone call and a fake sign-in page. A newly examined criminal platform called Work Panel brings target research, caller management, phishing-site creation, and stolen-credential handling into one web-based operation. The result …

Node.js Fixes 11 Security Flaws That Can Crash Servers and Break Filesystem Restrictions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 30, 2026 The Node.js project has released important security updates addressing 11 vulnerabilities across its active branches: 22.x, 24.x, and 26.x. The updates are now available as Node.js versions v22.23.2, v24.18.1, and v26.5.1. The July 2026 security release includes …

Developer Claims Claude Opus 5 Wiped an Entire Production Database in Minutes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 30, 2026 A developer has reported that Anthropic’s Claude Opus 5, running in Ultracode mode, accidentally wiped an entire production database in roughly ten minutes while working on a personal web project. According to the Reddit post, the incident …

North Korean Hackers Turn Trusted npm Packages Into a Gateway for Supply-Chain Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 30, 2026 North Korean-linked hackers are turning trusted npm packages into an entry point for widespread software supply-chain attacks. By compromising the accounts of legitimate package maintainers, the attackers can slip malicious updates into tools that developers and businesses …

TA488 May Have Exploited Outlook Web Access 0-Day Flaw Before Microsoft’s Emergency Patch

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

TA488 has been linked to a new campaign that turns a routine Outlook Web Access email into a gateway for mailbox compromise. The operation abused a now-patched cross-site scripting flaw, tracked as CVE-2026-42897, and could run malicious code when a …

Cisco Firewall Management Center 0-Day Actively Exploited to Access Sensitive Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

July 30, 2026 Cisco has released security updates for an actively exploited zero-day vulnerability in Cisco Secure Firewall Management Center (FMC) Software. This vulnerability, tracked as CVE-2026-20316, arises from static credentials embedded in the FMC web interface. Although the flaw …